Google paid over $17 million to bug hunters in 2025

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Google's $17.1 Million Bug Bounty in 2025 Highlights Security Research Value In 2025, Google awarded over $17 million to 747 security researchers through its Vulnerability Reward Program (VRP), marking a 40% increase from the previous year. The program has paid out over $81.6 million since its inception in 2010. Notable payouts included over $3.7 million for Chrome vulnerabilities and more than $3.5 million for cloud security defects. The highest individual reward in 2025 was $250,000. Google emphasized the importance of collaboration with the external security research community to enhance the safety of its products. The VRP also introduced new categories targeting AI vulnerabilities and launched a rewards program for its open-source tool OSV-SCALIBR. The Android and Google Devices Security Reward Program contributed over $2.9 million to the total. The initiative reflects Google's commitment to staying ahead of emerging threats and adapting to evolving technologies. 5 sources 22